Extracted

• • Target

    09211066e9466efc740f2e4849fa7172105f5bd76832cd8c0a073d8280a47b04

  • Size

    822KB

  • MD5

    e1c88ba9b3e626bf1af2441de04d6032

  • SHA1

    55b001de613bbdc2961f4f4841c58bd9689cf310

  • SHA256

    09211066e9466efc740f2e4849fa7172105f5bd76832cd8c0a073d8280a47b04

  • SHA512

    a63765398a9405440b1cc0a2755f52b9df2d74b92d25e0002be9ab6d8270a51f43f89c62b591223b11f3544bbd3335dd406ab3b5e5748e3ed8e39d5ae794f721

  • SSDEEP

    12288:WtIIfCafjmn0ff1bc2xTy6rlsmZ3a3MoidOoOzTH7LVLKgPKl/:MCjcBFDRsmx7koOzTpra

  Score

  10^/10

  formbookwc8iratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2